Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: +2SGVYlvF+dDj7Vn1V2O+yxDRyu4crbE1JPTvsKNTVk=
Subject key identifier: C0:D1:29:B1:C9:E8:78:F9:33:4B:BC:6F:51:02:4C:C6:EB:FD:1C:B3
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 01A0E74042F8E24B2439F777D5387E82FF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 09:02:23 +0000
Manifest this update: Mon 28 Sep 2026 09:02:23 +0000
Manifest next update: Tue 29 Sep 2026 09:02:23 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: AP85Oqd9NovGgbxgtjG6Se022jJrWFht86ZGp5PxLPI=)
2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:40:42:f8:e2:4b:24:39:f7:77:d5:38:7e:82:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Sep 28 09:02:23 2026 GMT
Not After : Sep 29 09:02:23 2026 GMT
Subject: CN=c0d129b1c9e878f9334bbc6f51024cc6ebfd1cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:04:67:d1:f1:60:86:1d:69:c9:e0:d2:46:
3f:3d:2a:29:42:67:08:03:ad:2f:28:26:96:c7:d9:
a6:e7:3c:6d:91:c5:e2:47:cb:ec:ad:f7:31:12:08:
eb:5b:6a:73:ba:e5:8e:69:e4:a5:5e:ce:e5:a3:36:
db:99:c5:0d:90:eb:46:30:fb:92:93:34:1c:45:94:
36:36:a9:d8:b2:6e:d0:2d:e6:06:67:9f:d4:51:0b:
ea:02:ca:35:d7:6c:f1:e4:82:e6:f6:c1:bf:81:e3:
48:0d:7b:06:6c:0a:05:12:e9:15:11:87:ef:43:63:
79:04:22:48:0a:92:99:30:cb:53:f6:7b:3c:90:24:
48:d7:70:27:3c:d0:73:1c:6d:da:7f:ed:82:ce:51:
64:24:e7:e2:b9:4b:c7:b2:63:4c:28:93:e5:4e:a1:
6f:a4:87:de:98:6b:ca:1a:dd:85:1b:65:fd:b5:fa:
ab:ad:9a:6e:f8:cb:af:4e:ad:11:29:9d:f4:da:47:
57:f8:c3:1f:c6:d5:17:b2:22:48:1c:e4:87:f9:b4:
29:43:f3:17:c4:0c:5f:e9:0d:dc:ca:94:19:49:95:
01:6a:79:b6:9f:90:a1:38:3d:7c:2d:ab:f2:a5:28:
f0:3e:d0:49:0b:40:f3:5b:dd:1a:b0:4b:15:d4:79:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:29:B1:C9:E8:78:F9:33:4B:BC:6F:51:02:4C:C6:EB:FD:1C:B3
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:04:53:96:2f:73:81:14:d0:eb:b8:da:cf:f8:60:d4:54:1e:
b6:cb:d3:54:07:41:64:7f:07:ee:fa:50:fc:ee:55:20:8b:19:
8f:84:f8:ce:af:4a:98:4c:06:5e:df:df:9f:64:b6:11:e0:20:
1f:d4:ef:ed:41:44:70:87:12:6c:a5:3c:a1:da:fb:d7:37:96:
ef:5a:11:07:a5:ef:54:55:c9:46:06:52:62:93:a8:82:83:32:
1d:d5:49:34:d7:4f:6b:b0:0c:98:14:32:f6:93:c1:82:2a:b5:
aa:65:89:7c:0f:20:0f:6f:47:84:a1:9f:b5:d7:47:79:b7:5c:
94:fb:70:1b:18:71:59:2c:81:e8:96:cd:f8:03:b2:c3:92:01:
91:d7:99:62:3e:bd:c1:cb:8f:01:3a:3b:df:e1:f4:81:5a:97:
ae:74:15:85:b0:4e:65:ab:cf:a8:52:66:3e:90:f3:71:f9:9b:
34:12:09:db:63:62:76:3c:26:cb:45:1f:88:07:6c:aa:2d:1e:
a5:a4:bc:7d:c0:5a:e0:5c:80:b9:17:52:00:31:03:4a:f0:c2:
8c:45:6d:1a:39:bc:02:e1:1a:40:3b:53:78:0f:24:d2:33:ed:
a5:41:e3:17:d9:34:8d:98:a2:df:33:3b:4b:82:1b:83:de:4a:
38:42:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:26:58 2026 by rpki-client